Known vulnerabilities in PHP - page 13

Vendor: PHP Group
Software: PHP
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 689
Public exploits: 156
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PHP PHP is affected by 689 known vulnerabilities: 6 critical, 124 high, 368 medium, 191 low Critical High Medium Low

Vulnerabilities (689)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110479 - Improper input validation
CVE-2006-4020
CWE-20 Low
Available
No
4.4.4, 4.10, 5.1.5 14.02.2024 SB2018103061
SB2006082901
#VU110490 - Improper input validation
CVE-2006-1490
CWE-20 Medium
Available
No
4.4.3, 4.10, 5.1.3 13.02.2023 SB2018103061
SB2006050801
#VU110443 - Improper input validation
CVE-2007-1396
CWE-20 Medium
No
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
#VU110448 - Improper input validation
CVE-2007-1376
CWE-20 Medium
Available
No
4.4.6, 4.10, 5.2.0 30.10.2018 SB2018103061
SB2007032001
#VU110449 - Improper input validation
CVE-2007-1378
CWE-20 Medium
No
No
4.4.5, 4.10 30.10.2018 SB2018103061
#VU110450 - Improper input validation
CVE-2007-1379
CWE-20 Medium
No
No
4.4.5, 4.10 30.10.2018 SB2018103061
#VU110451 - Improper input validation
CVE-2007-1380
CWE-20 Medium
Available
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
SB2007032001
#VU110458 - Improper input validation
CVE-2007-0905
CWE-20 Medium
No
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
#VU110459 - Improper input validation
CVE-2007-0906
CWE-20 Medium
No
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
SB2007032001
#VU110460 - Improper input validation
CVE-2007-0907
CWE-20 Medium
No
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
SB2007032001
#VU110462 - Improper input validation
CVE-2007-0909
CWE-20 Medium
No
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
SB2007032001
#VU110463 - Improper input validation
CVE-2007-0910
CWE-20 High
No
No
4.4.5, 4.10 30.10.2018 SB2018103061
SB2007032001
#VU110468 - Improper Control of Generation of Code ('Code Injection')
CVE-2006-4812
CWE-94 High
Available
No
4.10 30.10.2018 SB2018103061
SB2006103001
#VU110469 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2006-5178
CWE-362 Low
No
No
4.4.5, 4.10, 5.1.6 30.10.2018 SB2018103061
#VU110470 - Improper input validation
CVE-2006-4625
CWE-20 Low
Available
No
4.4.5, 4.10 30.10.2018 SB2018103061
#VU110477 - Improper input validation
CVE-2006-4433
CWE-20 Medium
No
No
4.4.3, 4.10, 5.1.3 30.10.2018 SB2018103061
#VU110487 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2006-1494
CWE-22 Low
Available
No
4.4.3, 4.10, 5.1.3 30.10.2018 SB2018103061
#VU110488 - Improper input validation
CVE-2006-1608
CWE-20 Low
Available
No
4.4.3, 4.10, 5.1.3 30.10.2018 SB2018103061
#VU110492 - Improper input validation
CVE-2006-1015
CWE-20 Medium
Available
No
4.4.3, 4.10, 5.1.3 30.10.2018 SB2018103061
#VU110480 - Permissions, Privileges, and Access Controls
CVE-2006-3011
CWE-264 Low
No
No
4.4.3, 4.10 20.07.2017 SB2018103061


Showing elements 241 - 260 out of 689